Cineworld issues statement after alleged card details leak

A number of Cineworld customers reported being able to access other person’s bookings and credit card information

Cineworld has denied claims that a data protection breach has exposed customers’ personal information. Concerned Cineworld members took to social media to alert the company after allegedly being able to view other customers’ bookings and credit card details.

Earlier this week, Cineworld Unlimited members received an email informing them that they would “no longer be able to book tickets for family members or friends who also have an Unlimited membership”. Instead, each Unlimited member would need to make their own bookings.

Issues followed after Cineworld launched a new website and app, with a number of members subsequently claiming that the updated platforms had exposed other customers’ information.

Taking to social media platform X, user CitizenMRIS said: “Ok… It’s not a joke anymore. I can access other people’s tickets on my account. @cineworld this is really bad.”

LewisDWhite said: “‘The new @cineworld app is horrific. Not only can you no longer book tickets for your unlimited friends and family, but I’m now seeing bookings of other people.”

X user Dyspraxicdoll said: “Loving the new part of the updated site that allows me to access random people’s data through my profile everytime I refresh!

“I can’t see my own bookings but can see random people’s bookings from all over the UK and even their payment details are linked.”

Cineworld’s X account said the company was aware of the bug but “other customer details, including payment details should not be visible”.

X user Dyspraxicdoll later shared a photo of card details, which were blurred for privacy, stating they did not belong to them.

While the team initially appeared to suggest that the reported bank card data breach was the “only report of this issue” they had received, a subsequent post from the Cineworld account appeared to acknowledge the possibility of further breaches.

Cineworld said: “If you are able to see any payment details that are not your own please could you send us a DM with the relevant screenshots so this can be investigated please?”

A spokesperson for Cineworld denied claims full card numbers and customers’ names were displayed and that the technical problems were resolved.

The company told the ECHO: “We’ve resolved a temporary technical issue on our platform that caused some customers to see incorrect booking history and masked card details. Full card numbers and customer names were not displayed.

“Customers still seeing incorrect information should log out of their account and log back in again. We’re sorry for the concern this has caused.”